Nillion

What it does

Nillion calls itself “humanity’s first blind computer.” The core idea: computation on data without anyone (including the nodes processing it) ever seeing the data. This isn’t encryption-at-rest or data masking. It’s computation on encrypted data using a combination of multi-party computationMPCMulti-Party Computation. A cryptographic technique where multiple parties jointly compute a function over their inputs without any party revealing its input to the others. Useful for shared computation on private data.Like a group of friends calculating the average of their salaries without anyone revealing their actual salary to the others. Each person contributes a piece of the answer, and the pieces combine into the result, but nobody learns anything except the average itself.Read more → (MPC), homomorphic encryptionFHEFully Homomorphic Encryption. A cryptographic technique that lets you compute on encrypted data without decrypting it. The result is also encrypted, and only the data owner can read it. FHE is the strongest form of computational privacy.Like sending a sealed box of ingredients to a chef, having the chef cook a meal inside the box without ever opening it, and getting back a sealed box with the finished meal. Only you can unseal it and see what's inside.Read more → (HE), and trusted execution environments (TEEs).

The network originally had a dual-layer architecture: nilChain (a Cosmos-based coordination layer for payments, stakingStakingLocking up a cryptocurrency to help secure a blockchain network, usually in exchange for rewards. The locked tokens act as a security deposit that can be taken away if the staker misbehaves.Like putting down a large rental deposit for an apartment. You get the money back if you behave, you earn interest while it's locked, and the landlord takes it if you trash the place.Read more →, and governance) and Petnet (the orchestration layer performing blind computation). nilChain was sunset on ~23 March 2026 and NIL migrated to Ethereum as an ERC-20 tokenTokenA digital unit of value or access rights tracked on a blockchain. Tokens can represent ownership in a project, a right to use a service, a share of future revenue, or simply a tradable asset with no underlying claim.Like a physical poker chip a casino issues. The chip itself has no value. What makes it worth something is what it lets you do at the casino, what the casino has promised, and how much other people will pay you for it.Read more →. Approximately 843 million of 1 billion tokens have been bridged. The “Nillion 2.0” transition, announced October 2025, has its first live deliverable: Blacklight, a verification layer launched ~2 February 2026 with pioneer verifier nodes (70,000 NIL stake requirement) and the ERC-8004 verification standard. The blind computation modules remain:

• nilDB – Encrypted data storage with permissioned access controls
• nilVM – Blind computation using MPC and homomorphic encryption. Data is split across nodes so no single node sees the complete dataset
• nilAI – Private LLMLLMLarge Language Model. A neural network trained on vast amounts of text to predict the next word in a sequence. Modern LLMs (GPT, Claude, Llama, Qwen, DeepSeek) generate human-quality text and are the foundation of most modern AI products.Like an autocomplete that read every book ever written. It has no memory of individual texts but it has absorbed the patterns of language so deeply that it can generate paragraphs that sound human. The skill is statistical, not conscious.Read more → inferenceInferenceRunning a trained AI model to produce an answer. Inference is what happens when you type a prompt into ChatGPT and get a response. The model takes your input, computes a best guess, and returns it.Like asking an expert for their opinion. The training was the decades they spent becoming an expert. The inference is the 30 seconds it takes them to answer your specific question.Read more → inside TEEs. Run AI models on your data without the model or infrastructure seeing it

Founded by Alex Page (CEO, ex-Goldman Sachs), Andrew Masanto (CSO, co-founded Hedera Hashgraph, ex-Linklaters and Rothschild), Conrad Whelan (CTO, founding engineer at Uber), Slava Rubin (CBO, founder of Indiegogo), Dr. Miguel de Vega (Chief Scientist, 30+ patents in cryptography), and Mark McDermott (COO, ex-Nike). This is an unusually credentialled team for a crypto project.

Token launched 24 March 2025 via CoinList sale ($0.40 per NIL) and Binance Launchpool. Alpha mainnet went live the same day.

Value proposition

Privacy-preserving AI computation. That’s the pitch, and it’s timely.

Every major AI modelModelA trained neural network that takes inputs (text, images, audio) and produces outputs (more text, classifications, generated content). In DeAI the model is the thing that actually does the work.Like a very experienced apprentice who has spent years watching thousands of masters make furniture. They can't explain how they know when a joint is right, but they can make a chair that looks and functions like a Chippendale. The training is invisible. The output is what matters.Read more → today requires your data in plaintext to process it. ChatGPT reads your prompts. Cloud GPUGPUGraphics Processing Unit. Originally designed to render video game graphics, GPUs turned out to be exceptionally good at the massively parallel math that AI models need. Modern AI training and inference runs almost entirely on GPUs.Like a factory with 10,000 workers doing the same simple task in parallel, versus a CPU which is more like 10 workers each doing different complex tasks. AI training involves doing simple math a million times per second on a million numbers, which is exactly what the GPU factory is designed for.Read more → providers see your trainingTrainingThe one-time process of teaching a neural network to perform a task by showing it massive amounts of example data and adjusting its internal weights until the outputs are good. Training builds the model; inference uses it.Like the years an apprentice spends learning a trade. You don't see any of the actual work, just thousands of repeated mistakes gradually becoming competence. By the end, the apprentice can do the job. The training was invisible, but the skill is now permanent.Read more → data. Enterprise AI deployments require trusting the infrastructure with sensitive information. Nillion’s thesis is that it’s fundamentally broken, and that blind computation, where the infrastructure processes data it can’t see, is the fix.

The technical approach combines three privacy-enhancing technologies (PETs):

1. MPC splits data across multiple nodes. Each node holds a fragment that is meaningless alone. Computation happens collaboratively without reassembling the data.
2. Homomorphic encryption enables mathematical operations on encrypted data, producing encrypted results that only the data owner can decrypt.
3. TEEs provide hardware-isolated enclaves where code runs in a protected environment that even the hardware operator cannot inspect.

Using all three is the defence-in-depth argument: if one technique has a vulnerability, the others compensate.

The counter-narrative is practical: blind computation is slow, expensive, and unproven at scale. MPC requires multiple rounds of communication between nodes. Homomorphic encryption adds orders-of-magnitude computational overhead. TEEs depend on hardware vendor trust (Intel SGXSGXIntel Software Guard Extensions. The first widely-deployed TEE technology, introduced in 2015. SGX creates encrypted memory regions (enclaves) where code and data are protected from the operating system and the machine's owner.Like a safe deposit box at a bank. The bank owns the safe room and can see who comes in and out, but they can't see what's inside the boxes. SGX gives applications a private box on a shared computer.Read more → has had side-channel attacks; NVIDIA TEETEETrusted Execution Environment. A hardware-secured region of a CPU or GPU where code runs in isolation, so even the machine's operator can't read what's happening inside. TEEs give decentralised AI inference privacy guarantees.Like a bank vault inside a bank. The bank owns the building, staffs the lobby, and runs the security cameras. But what's inside the vault is invisible to everyone, including the bank staff, unless the customer opens it.Read more → attestationAttestationA cryptographic proof that a piece of code is running on a specific hardware enclave in an unmodified state. Attestation lets remote users verify that a service is genuinely running what it claims to be running.Like a tamper-evident seal on a medicine bottle. The seal itself doesn't make the medicine safe, but it gives you a way to verify that nobody opened the bottle and swapped the contents before you bought it.Read more → is new). The question isn’t whether privacy-preserving computation is desirable; it obviously is. The question is whether Nillion can make it fast and cheap enough for production AI workloads.

As of April 2026, the chain migration is complete and Blacklight verification nodes are live. Applications exist (nilGPT, a private AI chatbot, plus LouisAI, Tickr, MonadicDNA, and Stadium Science are building on the platform). But no usage metrics are published. No revenue figures are available. The technology is real, but commercial validation is absent. The market maker scandal still hangs over the project. That’s a lot of baggage for a team that hasn’t yet demonstrated product-market fit.

For the sovereignty thesis, Nillion is architecturally one of the strongest projects we have reviewed. Data sovereignty is the entire product, not a feature, but the foundation. If the technology works at production scale, this is exactly what “own your mind” means in practice.

Tokenomics

NIL launched via CoinList ICOICOInitial Coin Offering. A token sale where a project sells tokens directly to the public, usually before any product exists. ICOs dominated 2017-2018 funding and are now mostly replaced by airdrops, IDOs, or fair launches.Like a company selling shares to the public before going public, except with no SEC oversight, no audited financials, and often no product at all. The 2017 ICO boom showed why those guardrails exist in traditional finance.Read more → in June 2024, raising $20 million at $0.40 per token (50 million tokens sold). A Binance Launchpool distributed 35 million tokens for free. Total funding across all rounds is approximately $65 million, including a $25 million seed round (December 2022) and a $25 million Series A (October 2024) led by Hack VCVCVenture Capital. Private investors who fund projects at an early stage in exchange for equity or token allocations. VC rounds are typically pre-launch, at steep discounts to any future public price, with multi-year vesting.Like angel investors in a startup who buy shares before the company goes public. They take more risk because the company might fail, so they get a better price. Once the company IPOs they can sell, and the public market pays whatever price it thinks is fair.Read more → and Distributed Global, with participation from HashKey Capital, Arthur Hayes, and Meltem Demirors.

Total initial supply is 1 billion NIL. There is no maximum supply. The token is inflationary by design, with an estimated ~1% annual inflationEmissionsNew tokens created and distributed by a blockchain protocol over time as rewards to validators, stakers, or miners. Emissions fund network security and participation at the cost of diluting existing holders.Like a company that pays employees partly in newly printed shares. Every year the total number of shares goes up, which means existing shareholders own a slightly smaller slice of the same company unless the company grows faster than the printing.Read more → rate controlled by governance. Distribution:

• Ecosystem & R&D: 26.5% – validatorValidatorA computer that runs the full blockchain protocol, verifies transactions, and proposes new blocks. Validators are the workers that keep a Proof of Stake network running, and they earn rewards for doing the work correctly.Like a notary public who witnesses and stamps legal documents. Validators witness transactions, check they follow the rules, and stamp them into the permanent record. A notary who commits fraud loses their license. Validators work the same way, except the license is staked tokens that get slashed on misbehaviour.Read more → incentives, developer rewards, network expansion
• Early Backers: 21% – seed, pre-seed, and 2024 funding round participants
• Core Contributors: 20% – team and advisors
• Community: 16.5% – airdrops, grants, incentive programmes
• Protocol Development: 10% – ongoing research and development
• Public Sale (CoinList): 5% – $0.40 per NIL
• Binance Launchpool: 3.5% – free distribution
• LiquidityLiquidityHow easily a token can be bought or sold without moving the price. High liquidity means you can enter or exit large positions quickly at the quoted price. Low liquidity means even small trades can swing the market.Like the difference between selling a house and selling a share of Apple stock. The house might be worth more on paper, but finding a buyer at that price takes weeks. The Apple share converts to cash in one click.Read more →: 2.5% – market making

Circulating supplyCirculating SupplyThe number of tokens currently in circulation and tradeable on the open market. Differs from total supply (which includes locked or unvested tokens) and max supply (the upper limit, if there is one).Like the number of cars on the road today versus the number ever produced. Some are in showrooms, some in junkyards, some still at the factory. Only the ones on the road count toward what people are actually driving.Read more → is 314.5 million NIL (31.45%). A major unlock of 114.5 million tokens was scheduled for 24 March 2026, coinciding with the nilChain halt and Ethereum migration.

The market maker incident. According to Nillion’s own public disclosure, in November 2025 an unauthorised market maker sold approximately 65 million NIL tokens onto the open market, triggering a roughly 50% price crash. Nillion launched a buybackBuybackUsing protocol revenue to purchase tokens on the open market, usually to burn them or return them to a treasury. Buybacks convert business income into upward pressure on the token by reducing circulating supply.Like a public company using profits to repurchase and retire its own shares. The cash leaves the company's balance sheet, the share count drops, and every remaining shareholder owns a slightly bigger slice of the same business.Read more → programme in response, but by 28 November had repurchased only 1.1 million of the 65 million tokens sold, less than 2% of the damage. The token hit an all-time low of $0.039 in February 2026. This wasn’t a hack or exploit. It was a failure of counterparty controls. The team allocated tokens for market making and lost control of how they were used.

NIL is down 88% from its $0.40 ICO price and 94.5% from its all-time high of $0.90 at launch. Market cap sits below the $65 million total raised, meaning investors are collectively underwater.

Chain migration (complete). nilChain (Cosmos) was halted ~23 March 2026. NIL migrated to Ethereum as an ERC-20 token (contract: 0x7Cf9a80db3B29eE8efE3710AadB7b95270572d47, audited by Quantstamp). The migration was 1:1 via a Merkle proof claim process. Approximately 843 million of 1 billion tokens were bridged to Ethereum. The migration deadline has passed. Cosmos-based staking ended with the nilChain halt. Blacklight pioneer verifier nodes are now live, requiring a 70,000 NIL stake.

Listed on Binance, Coinbase, Bybit, Gate.io, MEXC, HTX, and Bitget. Unusually strong exchange coverage for a project at this valuation. Most tokens at this market cap are on DEXs and minor CEXs only.

How to participate

NIL is now on Ethereum. The nilChain migration deadline has passed. NIL is a standard ERC-20 token. If you still have unmigrated tokens from Cosmos, check migrate.nillion.com for any residual claim process, but the deadline is gone.

Run a Blacklight verifier node. Pioneer verifier nodes are live on the Blacklight verification layer. Requires staking 70,000 NIL. This is the primary staking mechanism post-migration, replacing Cosmos PoSProof of StakeA consensus mechanism where validators earn the right to create new blocks by staking tokens as collateral. If they misbehave, the network slashes their stake. Proof of Stake replaced energy-intensive mining on most modern chains.Like being a licensed auctioneer. You post a bond to get the license, you earn fees for every auction you run, and you lose the bond if you rig an auction. The bigger the bond, the more auctions you get to run.Read more →.

Hold NIL. Standard ERC-20 token on Ethereum. Available on Binance, Coinbase, Bybit, and other major exchanges.

Build on Nillion. Use SDKs (Python, TypeScript, Rust) to build privacy-preserving applications. nilDB for encrypted storage, nilVM for blind computation, nilAI for private AI inference. Developer documentation is actively maintained with 102 public GitHub repositories. Technical skill: advanced. Ecosystem grants available. Note: the compute layer operates independently of the chain migration. Builders are not affected by the Cosmos-to-Ethereum switch.

Honest assessment

Freedom Score: 56/100

Data sovereignty isn’t a feature bolted on here: it’s the entire product. But scoring well on paper and performing well in practice are different things. Governance controls failed to prevent a market maker scandal, and real-world decentralisation is unproven at any meaningful scale. The chain migration is complete and Blacklight verification nodes are live, which is progress, but the network still has a lot to prove.

Infrastructure Decentralisation: 11/20. Dual-layer architecture with Petnet compute nodes and the coordination layer now on Ethereum. Blacklight verification nodes are live with pioneer verifiers staking 70,000 NIL, representing a concrete step forward from the previous review. The Petnet layer’s actual node distribution and decentralisation remains unclear in alpha phase. TEE-based nilAI creates hardware vendor dependency (Intel/NVIDIA). Independent verification of Blacklight node count and geographic distribution is still needed.

Governance Decentralisation: 10/20. Cosmos governance module was retired with nilChain. Ethereum-based governance mechanisms are under design, but Blacklight verifier participation provides a functioning coordination layer. The market maker incident exposed a governance failure: the team allocated 2.5% of supply (25M tokens allocated, 65M apparently accessible) to a market maker without adequate controls, and that entity dumped the lot. 41% insider allocation still concentrates power. The migration to Ethereum and Blacklight launch show the team is rebuilding governance infrastructure, though on-chain voting mechanisms are not yet live.

Token Distribution Fairness: 6/15. 41% to insiders is heavy. The market maker incident made it worse: 65 million tokens dumped onto retail holders, with the buyback recovering less than 2%. Public sale investors are down 88% from ICO price. However, the Binance Launchpool allocation (3.5%) provided free distribution to a broad retail base, and all vestingVestingA schedule that locks up tokens allocated to insiders, investors, and team members, releasing them gradually over months or years. Vesting prevents insiders from dumping on public buyers immediately after launch.Like a new employee's stock options at a startup. You don't get all the shares on day one. They unlock over four years so you stick around and do the work rather than cashing out and leaving.Read more → schedules are publicly documented. The distribution is poor but not the worst in the space.

Censorship Resistance: 10/15. MPC-based blind computation is inherently censorship-resistant: nodes can’t inspect or selectively refuse data they can’t see. The cryptographic architecture is one of the strongest censorship-resistance designs in DeAIDeAIDecentralised AI. An umbrella term for blockchain-based projects that build AI infrastructure (compute, data, inference, models, agents) without a single central provider controlling the system.Like the difference between streaming a movie from Netflix and sharing it via BitTorrent. Netflix is fast and polished but one company controls what you can watch and what you pay. BitTorrent is messier but no single operator can shut you out.Read more →. Limited by TEE hardware vendor trust and unproven production-scale decentralisation.

Data Sovereignty: 12/15. This is Nillion’s strongest dimension. MPC ensures no single node sees complete data. Homomorphic encryption enables computation on encrypted data. nilDB provides encrypted storage with permissioned access. nilAI runs LLM inference inside TEEs. One of the best data sovereignty architectures reviewed. Production-scale privacy guarantees aren’t independently verified, but the cryptographic design is among the strongest in the space.

Open Source Transparency: 7/15. 102 public GitHub repos with ~1,141 total stars. Key repos (nilchain, nilAI, nildb) are public. Active development with recent commits. The ERC-20 contract was audited by Quantstamp, the first recognised security audit for any Nillion component. Core cryptographic components may not be fully open-sourced.

Returns Score: 42/100

Token Utility: 14/20. NIL is used for blind compute payments, governance, and Blacklight verifier staking (70,000 NIL). Cosmos PoS staking ended with nilChain. Blacklight verification is the replacement staking mechanism. The token remains structurally required for compute payments. Score unchanged because the utility design is sound; actual usage volume remains minimal.

Value Accrual: 8/20. Cosmos inflation-based staking rewards ended. Blacklight verifier staking is live but value accrual mechanics (fee distribution, burns) are not yet implemented. No buy-and-burn mechanism. Value accrual remains indirect and aspirational.

Supply Dynamics: 5/20. No max supply. 31.45% circulating with large unlocks. According to Nillion’s own disclosure, an unauthorised market maker sold 65 million tokens in November 2025, crashing the price ~50%. The buyback programme recovered only 1.1 million tokens, 1.7% of what was sold. That’s not a recovery; it’s a gesture. No burnBurnPermanently removing tokens from circulation by sending them to an address that no one controls. Burns reduce total supply, which (all else equal) makes each remaining token worth more of the network's value.Like a company buying back its own shares and shredding them. The company's total value stays the same, but each remaining share now represents a slightly bigger slice of that value.Read more → mechanism. Token down 94.5% from ATHATHAll-Time High. The highest price a token has ever reached. ATH is usually quoted as a reference point for how far the current price has fallen (or risen) since the peak.Like the record lap time on a racetrack. It tells you what the car has been capable of at its absolute best, not what it will do today. Whether that record gets broken again depends on conditions that may or may not come back.Read more →, 88% from ICO price. FDVFDVFully Diluted Valuation. The market cap a token would have if every token that will ever exist were already in circulation. FDV is what the project would be worth if all locked, vesting, or unminted tokens were trading today.Like valuing a startup based on what every share would be worth if all the unvested employee options had already been exercised. The number is bigger and uglier than the official market cap, but it tells you the true ceiling.Read more → ($50M) still below total raised ($65M). The market maker incident demonstrated that token allocation controls were inadequate.

Revenue Sustainability: 7/25. Zero demonstrated protocol revenue. Alpha mainnet since March 2025, nearly a year with no published usage metrics or revenue figures. Applications exist (nilGPT, LouisAI, Tickr) but the blind compute market is nascent. No DeFiLlama or Token Terminal presence. Score reflects functional infrastructure with zero revenue evidence.

Liquidity & Access: 8/15. Listed on Binance, Coinbase, Bybit, Gate.io, MEXC, HTX, and Bitget. Strong exchange coverage unusual for a project at this valuation. The chain migration is complete with ~843M tokens on Ethereum. Liquidity has consolidated on the ERC-20 token.

Quadrant: D (Low Freedom, Low Returns)

Nillion has dropped from Quadrant B to Quadrant D. The privacy architecture remains strong in theory, but the market maker scandal damaged trust, governance controls proved inadequate, and the token economics are in disarray. Blacklight’s launch is a step in the right direction, but it doesn’t erase the operational failures or the absent revenue. This is a project with a credible thesis that still needs to prove it can execute.

Key risks

• Market maker scandal. An unauthorised market maker dumped 65 million NIL tokens in November 2025, crashing the price ~50%. The buyback programme recovered 1.1 million tokens, less than 2% of the damage. This was a failure of counterparty controls, not a hack. It raises serious questions about team oversight of token allocations.
• Post-migration unknowns. nilChain halted ~23 March 2026. ~843M of 1B tokens bridged to Ethereum. The migration deadline has passed. Users who missed it may have lost access to their tokens. Blacklight verifier staking is live but the broader Nillion 2.0 tokenomics are still being finalised.
• Zero revenue. The entire investment case rests on future adoption of blind computation at scale. No paying customers demonstrated after nearly a year of alpha mainnet.
• Token in freefall. Down 88% from the $0.40 ICO price and 94.5% from ATH. Hit all-time low in February 2026. Investors who bought the CoinList sale are deeply underwater.
• Insider overhang. 41% allocated to Core Contributors and Early Backers. 114.5M token unlock coinciding with the chain migration in March 2026.
• Nillion 2.0 is early. The October 2025 announcement promised permissionless nodes, new tokenomics, burn mechanisms, and community governance. Blacklight verification nodes launched February 2026, which is a concrete deliverable. But burn mechanisms, fee distribution, and full community governance remain unimplemented. The tokenomics review is still in progress.
• Blind compute is unproven at scale. MPC is slow. Homomorphic encryption is computationally expensive. Whether these technologies can support production AI workloads at competitive prices is the open question.
• TEE vendor dependency. nilAI relies on Intel/NVIDIA TEE hardware attestation. Hardware side-channel attacks are a known attack surface.
• Competition. Phala Network, Oasis Network, and Secret Network are all in the privacy compute space with more mature networks.

Score change log